Linux Kernel e1000e驱动巨型帧处理绕过安全检查漏洞

BUGTRAQ ID: 37523 CVECAN ID: CVE-2009-4538 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel所使用的e1000e驱动中drivers/net/e1000e/netdev.c没有正确地检查超过MTU的以太网帧的大小，远程攻击者可以绕过已有的碎片检查，导致部分无效的帧传送给网络栈。 Linux kernel 2.6.32.3 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2010:0019-01）以及相应补丁: RHSA-2010:0019-01：Importan...

PHP mbstring.func_overload Webserver本地拒绝服务漏洞

BUGTRAQ ID: 33542 CVE ID: CVE-2009-0754 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 运行在Apache上的PHP允许本地用户通过修改.htaccess中的mbstring.funcoverload设置来修改同一Web服务器上所承载的其他站点的行为，将设置应用到同一服务器的其他虚拟主机，导致无法正确的处理多字节字符串。 PHP PHP 5.1.6 PHP PHP 4.4.4 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://snaps.php.net/...

RedHat Security Advisory RHSA-2009:1689

The remote host is missing updates announced in advisory RHSA-2009:1689. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A flaw was found in the way Cond...

RedHat Security Advisory RHSA-2009:1670

The remote host is missing updates announced in advisory RHSA-2009:1670. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: NULL pointer dereference flaws in the r128 driver. Checks to test if the Concurrent Command Engine state was initialized...

RedHat Security Advisory RHSA-2009:1674

The remote host is missing updates announced in advisory RHSA-2009:1674. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

RedHat Security Advisory RHSA-2009:1688

The remote host is missing updates announced in advisory RHSA-2009:1688. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A flaw was found in the way Cond...

RedHat Security Advisory RHSA-2009:1681

The remote host is missing updates announced in advisory RHSA-2009:1681. GPdf is a viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in GPdf's Type 1 font parser. A specially-crafted PDF file with an embedded Type 1 font cou...

RedHat Security Advisory RHSA-2009:1680

The remote host is missing updates announced in advisory RHSA-2009:1680. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in Xpdf's Type 1 font parser. A specially-crafted PDF file with an...

RedHat Security Advisory RHSA-2009:1682

The remote host is missing updates announced in advisory RHSA-2009:1682. The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in KPD...

RedHat Security Advisory RHSA-2009:1680

The remote host is missing updates announced in advisory RHSA-2009:1680. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in Xpdf SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text...

RedHat Security Advisory RHSA-2009:1670

The remote host is missing updates announced in advisory RHSA-2009:1670. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: NULL pointer dereference flaws in the r128 driver. Checks to test if the Concurrent Command Engine state was initialized...

RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

RedHat Security Advisory RHSA-2009:1688

The remote host is missing updates announced in advisory RHSA-2009:1688. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A flaw was found in the way Cond...

Fedora Core 12 FEDORA-2009-13362 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-13362. OpenVAS Vulnerability Test $Id: fcore200913362.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13362 seamonkey Authors: Thomas Reinke Copyright: Copyright c...

RedHat Security Advisory RHSA-2009:1681

The remote host is missing updates announced in advisory RHSA-2009:1681. GPdf is a viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in GPdf SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...

Ubuntu: Security Advisory (USN-875-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Condor任务提交绕过安全限制漏洞

BUGTRAQ ID: 37443 CVE ID: CVE-2009-4133 Condor是为计算密集任务所设计的专用负载管理系统，提供任务队列机制、调度策略、优先级规划和资源监控及管理。 Condor管理任务的方式存在漏洞，可能允许授权向Condor提交任务的用户以不同本地用户的身份排列任务，这可能导致非授权访问该用户的账号。Condor不会以root用户权限运行任务，因此这个漏洞不会导致入侵root用户账号。 Condor Project Condor 7.4 厂商补丁： RedHat ------...

CVE-2009-4143

PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to 1 interrupt corruption of the SESSION superglobal array and 2 the session.savepath directive...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2009:1674 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...

[security bulletin] HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01124817 Version: 1 HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution NOTICE: The information in this Security Bulletin should be acte...